Lumension Endpoint SmartConnector?
What I have heard from Lumension is that we need to get the data from the SQL DB that this is running off of. I am going to assume a SQL Smart Connector will do the trick and then we filter the hell out of it. Just and assumption
A simple way to get the Lumension events is by using a udp Syslog connector. Point the Lumension Manager syslog to the smart connector. Then in ESM or Express, create a filter where 'Name Contains scomc'. From there, you can filter DEVICE-ATTACHED events, etc.
Asuri, I have not. We were wondering if we need to grab from the DB directly or we will try what Jeff just proposed... We have engineer working on this so I will be forwarding this idea to him to see if its practical to get what we need from the manager